Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
File: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft (raw, json)
Hash identifier: Zm0dwQZzuEv9d65MQBP+DdzUNjv860pWnESacaG5RY8=
Subject key identifier: 74:E5:35:78:23:3B:8C:FF:00:66:A3:50:DF:96:85:EF:33:54:E8:5E
Authority key identifier: EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F
Certificate issuer: /CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
Certificate serial: 0198D4A79817A49FA6F2B97D650C7FC492F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
Manifest number: 0329
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl (hash: KChR6CDRzil6EzlgI5bwGhfgTrnumMq/XNCc+47JwTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:98:17:a4:9f:a6:f2:b9:7d:65:0c:7f:c4:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=74e53578233b8cff0066a350df9685ef3354e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:4c:be:54:5b:85:f0:a5:f4:15:19:6d:07:
38:af:78:5a:24:a5:de:f0:3f:2d:60:8c:45:96:24:
df:93:7a:2f:60:5e:54:8f:27:dd:b3:06:32:a4:5b:
00:31:4b:54:cc:15:ff:59:ad:32:ff:27:7e:4e:c0:
e7:f1:80:d0:3f:9b:a5:cf:c8:49:a5:4c:f4:db:e2:
6b:32:b0:c8:a0:e8:31:1c:ff:9a:e5:07:7f:c8:10:
4f:0b:bb:d1:38:e6:ea:9e:ca:77:66:fd:6b:60:e8:
80:52:f4:98:d3:30:f3:20:51:41:4c:c5:0a:5b:66:
b3:5b:65:b9:41:0a:21:9a:ab:ab:93:71:5c:95:97:
2f:2f:3d:22:f6:10:ac:ee:8a:42:c9:bf:e9:bd:72:
c3:28:e2:01:f8:5a:46:79:e3:ab:34:2f:f2:09:8b:
d1:d8:37:bf:b7:12:cc:56:2e:64:18:7a:84:7e:c9:
06:9c:9a:e7:95:13:30:ff:35:59:6b:4a:d8:06:4e:
4b:99:64:3d:49:a9:be:90:a6:d6:80:d8:ba:11:63:
0a:21:cf:92:49:e8:2a:95:02:cf:38:06:c1:82:23:
fd:8f:d0:74:6c:92:4d:b8:96:c6:63:95:67:4f:44:
25:ce:d4:46:f2:40:d8:a0:17:ee:b9:4d:72:c7:ff:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:35:78:23:3B:8C:FF:00:66:A3:50:DF:96:85:EF:33:54:E8:5E
X509v3 Authority Key Identifier:
keyid:EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ba:73:92:a9:6f:74:57:b9:cc:43:f4:a3:17:53:1d:54:5c:
0e:42:1e:5c:10:d9:0a:a1:95:4a:1b:fb:93:99:bc:52:fa:5f:
51:e5:3f:1a:7f:49:56:d0:70:d3:ea:0e:96:2f:66:cc:5d:2b:
46:ac:24:3d:4c:91:46:b7:6e:46:1d:cb:86:6b:8e:0a:89:c1:
ce:2e:68:25:18:e8:74:de:b8:f0:87:82:04:30:05:8d:56:40:
28:0e:b3:1f:f9:65:66:de:d5:d2:d8:f0:d3:6b:c4:4b:23:ca:
93:c5:3f:64:60:42:6a:6b:34:89:a0:8f:0f:55:91:ef:13:b1:
09:4b:3a:ae:ca:10:94:0d:36:4a:f0:07:bc:09:fc:8c:05:9c:
40:f1:f7:3f:63:9c:b7:92:ae:8f:07:70:60:d3:62:b1:4f:da:
68:50:83:8b:4b:2e:b6:0f:8a:ea:41:0f:08:8b:29:62:d5:27:
6a:a9:40:6c:01:55:0e:bc:2f:cb:44:29:d9:90:d2:e9:4b:4a:
80:8d:ef:c6:e9:81:d8:bc:8d:db:c8:79:ba:ee:0a:c6:38:c2:
d5:9c:64:fd:59:b9:70:4f:b4:91:d3:fa:c9:79:e7:cb:94:9f:
57:c6:d1:3f:3c:b8:11:92:0b:a5:48:51:44:83:cb:5c:61:b7:
38:24:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:21 2025 by rpki-client